This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/70abb0-7aec-44f5-8583-bebee24feca9/1/OYEHPCI_dR4z19QOeS9SnRQw-n8.mft File: OYEHPCI_dR4z19QOeS9SnRQw-n8.mft (raw, json) Hash identifier: 1Lf8Vy+awz4KesGB9necdQFWsUFK5T0KaRBIIrUDv5g= Subject key identifier: DE:3A:BF:E9:ED:29:43:A0:77:04:A4:CB:D2:21:9B:50:E3:26:80:CE Authority key identifier: 39:81:07:3C:22:3F:75:1E:33:D7:D4:0E:79:2F:52:9D:14:30:FA:7F Certificate issuer: /CN=3981073c223f751e33d7d40e792f529d1430fa7f Certificate serial: 019B2D0B911F3245B01006A342F88672CA39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OYEHPCI_dR4z19QOeS9SnRQw-n8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/70abb0-7aec-44f5-8583-bebee24feca9/1/OYEHPCI_dR4z19QOeS9SnRQw-n8.mft Manifest number: 01A0 Signing time: Wed 17 Dec 2025 16:01:31 +0000 Manifest this update: Wed 17 Dec 2025 16:01:31 +0000 Manifest next update: Thu 18 Dec 2025 16:01:31 +0000 Files and hashes: 1: OYEHPCI_dR4z19QOeS9SnRQw-n8.crl (hash: JDajcGQJs5tx8RVTwhwzgGZ5beEKilF9KLCb4ah6bf8=) 2: vGkLbSDH1uJpYJ7xzGoQmZeUqxg.roa (hash: 2OV0rpyTFmg8lfpImi7TfQmWayywKrEbAhbjG35gI2o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/70abb0-7aec-44f5-8583-bebee24feca9/1/OYEHPCI_dR4z19QOeS9SnRQw-n8.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/70abb0-7aec-44f5-8583-bebee24feca9/1/OYEHPCI_dR4z19QOeS9SnRQw-n8.mft rsync://rpki.ripe.net/repository/DEFAULT/OYEHPCI_dR4z19QOeS9SnRQw-n8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0b:91:1f:32:45:b0:10:06:a3:42:f8:86:72:ca:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3981073c223f751e33d7d40e792f529d1430fa7f Validity Not Before: Dec 17 16:01:31 2025 GMT Not After : Dec 18 16:01:31 2025 GMT Subject: CN=de3abfe9ed2943a07704a4cbd2219b50e32680ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:cb:33:2e:dc:eb:6e:f8:5f:de:1c:43:0b:9f: 04:37:6d:53:8c:96:e0:7b:5f:63:dd:54:84:08:57: df:09:59:3a:4d:cb:7c:89:f1:8f:a5:ce:07:5e:ff: bf:80:f5:43:0c:5f:f7:cc:fb:4c:c4:b9:b0:af:d3: 1b:f6:a0:5b:a6:17:77:b6:53:fc:12:22:fa:3d:9e: ea:e4:0b:42:9b:12:2c:81:98:2f:2a:b0:d2:8f:b0: e8:8b:7d:d6:9e:be:71:51:9d:d5:c3:2d:f7:f8:b9: 98:a2:59:17:f6:bf:5d:ca:5a:45:4b:76:8f:9a:6d: 76:86:4c:48:45:7a:3a:5f:7a:fb:fa:a1:16:71:f4: 8d:2b:36:db:4b:c8:e6:84:57:06:88:fb:ed:6b:24: f9:54:9b:d5:e3:5f:66:71:30:93:80:5d:09:08:a2: 72:2d:98:df:8a:ba:02:a9:cc:b0:e7:41:7e:f4:b0: d3:bc:36:1b:52:14:03:74:67:f6:de:44:ef:d6:dd: 9a:f0:c4:f2:ae:d5:c2:76:cb:e5:a7:e4:6d:ad:39: e1:b5:b5:5b:a7:f9:54:66:61:89:af:1c:96:5f:b9: 8c:b5:aa:2b:2d:06:e2:07:44:92:71:37:ad:81:85: a9:79:7d:27:7f:72:1e:42:11:0b:79:8c:e2:1d:99: a7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:3A:BF:E9:ED:29:43:A0:77:04:A4:CB:D2:21:9B:50:E3:26:80:CE X509v3 Authority Key Identifier: keyid:39:81:07:3C:22:3F:75:1E:33:D7:D4:0E:79:2F:52:9D:14:30:FA:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OYEHPCI_dR4z19QOeS9SnRQw-n8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/70abb0-7aec-44f5-8583-bebee24feca9/1/OYEHPCI_dR4z19QOeS9SnRQw-n8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/70abb0-7aec-44f5-8583-bebee24feca9/1/OYEHPCI_dR4z19QOeS9SnRQw-n8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:45:48:75:67:62:63:dc:83:56:2f:72:de:f9:f2:44:0f:64: 9d:be:b2:84:89:c2:11:33:5f:0f:2b:41:35:db:ff:12:9d:d3: 55:49:3a:c8:a4:92:da:d9:2e:80:3f:47:5e:e0:fd:e9:bf:ef: b2:35:3e:ee:4f:27:dd:a0:a2:c5:e3:19:79:cb:e3:4e:7e:1e: f5:ba:ba:a1:cf:90:1b:e5:5e:6a:f2:d7:e9:79:0b:22:4b:35: 83:0e:4d:86:71:33:22:9d:8b:0f:c0:5f:b4:e4:9e:1f:93:04: e9:cf:88:a0:3b:c2:51:ae:20:c7:99:2e:5d:41:a9:6e:a5:f3: c7:f0:ea:79:69:72:04:53:d1:14:b2:68:59:3c:f2:02:2b:7f: 40:f8:8b:eb:6a:bb:0d:9c:e2:b0:a4:28:06:f6:af:04:08:95: b2:8d:8a:f6:25:05:90:d3:dd:6d:77:fa:55:e9:c5:f9:9d:d2: 33:03:17:66:b5:fb:62:3d:6b:21:8c:87:bf:01:77:81:be:53: a3:69:63:c1:92:e2:96:96:35:41:74:44:a8:44:37:c4:74:3f: dc:70:47:dd:86:4c:3a:cd:b9:fc:f3:9f:f8:0f:6a:63:07:2c: ea:97:d6:08:be:37:0a:87:79:ea:ad:f5:8e:55:67:b7:c3:8a: bd:c5:0b:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstC5EfMkWwEAajQviGcso5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5ODEwNzNjMjIzZjc1MWUzM2Q3ZDQwZTc5MmY1MjlkMTQz MGZhN2YwHhcNMjUxMjE3MTYwMTMxWhcNMjUxMjE4MTYwMTMxWjAzMTEwLwYDVQQD EyhkZTNhYmZlOWVkMjk0M2EwNzcwNGE0Y2JkMjIxOWI1MGUzMjY4MGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MszLtzrbvhf3hxDC58EN21TjJbg e19j3VSECFffCVk6Tct8ifGPpc4HXv+/gPVDDF/3zPtMxLmwr9Mb9qBbphd3tlP8 EiL6PZ7q5AtCmxIsgZgvKrDSj7Doi33Wnr5xUZ3Vwy33+LmYolkX9r9dylpFS3aP mm12hkxIRXo6X3r7+qEWcfSNKzbbS8jmhFcGiPvtayT5VJvV419mcTCTgF0JCKJy LZjfiroCqcyw50F+9LDTvDYbUhQDdGf23kTv1t2a8MTyrtXCdsvlp+RtrTnhtbVb p/lUZmGJrxyWX7mMtaorLQbiB0SScTetgYWpeX0nf3IeQhELeYziHZmnSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN46v+ntKUOgdwSky9Ihm1DjJoDOMB8GA1UdIwQY MBaAFDmBBzwiP3UeM9fUDnkvUp0UMPp/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1lFSFBDSV9kUjR6MTlRT2VTOVNuUlF3LW44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS83MGFiYjAtN2FlYy00NGY1LTg1ODMt YmViZWUyNGZlY2E5LzEvT1lFSFBDSV9kUjR6MTlRT2VTOVNuUlF3LW44Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS83MGFiYjAtN2FlYy00NGY1LTg1ODMtYmViZWUyNGZlY2E5 LzEvT1lFSFBDSV9kUjR6MTlRT2VTOVNuUlF3LW44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaEVIdWdi Y9yDVi9y3vnyRA9knb6yhInCETNfDytBNdv/Ep3TVUk6yKSS2tkugD9HXuD96b/v sjU+7k8n3aCixeMZecvjTn4e9bq6oc+QG+VeavLX6XkLIks1gw5NhnEzIp2LD8Bf tOSeH5ME6c+IoDvCUa4gx5kuXUGpbqXzx/DqeWlyBFPRFLJoWTzyAit/QPiL62q7 DZzisKQoBvavBAiVso2K9iUFkNPdbXf6VenF+Z3SMwMXZrX7Yj1rIYyHvwF3gb5T o2ljwZLilpY1QXREqEQ3xHQ/3HBH3YZMOs25/POf+A9qYwcs6pfWCL43Cod56q31 jlVnt8OKvcULOA== -----END CERTIFICATE-----Generated at Wed Dec 17 20:13:51 2025 by rpki-client